On 3/10/2013 4:25 PM, Sean Brown wrote: > I have installed ClamAV 0.97.6 and ran freshclam to update the signatures. I > ran clamscan with the following options: > > --debug --bytecode=yes --bytecode-unsigned=yes > --algorithmic-detection=yes --detect-broken=yes --detect-pua=yes > --phishing-sigs=yes --scan-pe=yes --scan-ole2=yes --scan-archive=yes > > against a test file (Windows 8 trial ISO) to see what it would do. I'm > running > it on Slackware 14.0 > > Looking at the debug output I see clam ignoring a lot of signatures > > LibClamAV debug: Ignoring signature Trojan.SubSeven.14 (Clam) > LibClamAV debug: Ignoring signature VBS.CrazyWorm.C ...
These are signatures intentionally turned off due to false positives. In most cases they are replaced with "better" signatures. All is well. -- Noel Jones _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
